19.12.2012 Views

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Safeguard Catalogue - Hardware & Software Remarks<br />

____________________________________________________________________ .........................................<br />

not easy to detect a special tag within an HTML page, because of the complex<br />

possibilities available in the current HTML version.<br />

Unfortunately, Java applets are not consistently sent as files with the suffix<br />

.class. Instead it is also possible to use compressed files, which may have the<br />

suffix .jar (Java archive) for example. This means that a Java filter also has to<br />

know and take account of all of the compression methods supported by the<br />

browsers that are used.<br />

Another alternative for detecting programs with active content with damaging<br />

functions is to create a database with signatures, in much the same way as for<br />

programs designed to protect against computer viruses, and to compare every<br />

program downloaded from the Internet against these signatures. Unfortunately<br />

this procedure is still very much in the early stages of development, and it<br />

remains to be seen whether the resultant programs will be as effective as the<br />

programs providing protection against computer viruses.<br />

Further potential danger results from the possibility of running JavaScript<br />

from within Java. <strong>The</strong> effectiveness of graduated filtering of Java and<br />

JavaScript should therefore be examined.<br />

____________________________________________________________________ .........................................<br />

<strong>IT</strong>-<strong>Baseline</strong> <strong>Protection</strong> <strong>Manual</strong>: Oktober 2000

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!